Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVd7YfIIS_Jmvyrjb_OmYBc6bds.roa
File: ZVd7YfIIS_Jmvyrjb_OmYBc6bds.roa (raw, json)
Hash identifier: 5AKTP1pBdNLsv6OeojLHhRhoK3howluv4cnTBIzyZVE=
Subject key identifier: 65:57:7B:61:F2:08:4B:F2:66:BF:2A:E3:6F:F3:A6:60:17:3A:6D:DB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0198538114CE00347EEF4EBCB86DD298C0B1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVd7YfIIS_Jmvyrjb_OmYBc6bds.roa
Signing time: Tue 29 Jul 2025 00:07:05 +0000
ROA not before: Tue 29 Jul 2025 00:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.99.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
89.106.25.0/24 maxlen: 24
89.106.26.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:81:14:ce:00:34:7e:ef:4e:bc:b8:6d:d2:98:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 00:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65577b61f2084bf266bf2ae36ff3a660173a6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:a3:ce:eb:64:8d:ad:4d:62:80:cc:fe:0f:
e4:42:6f:d4:a0:77:ab:36:9a:d0:99:e5:d2:dd:91:
f5:05:28:5e:39:d1:f0:4d:04:bc:e5:d7:73:64:9e:
18:f9:70:c6:de:23:cd:b0:1f:6b:44:df:ad:b9:ea:
c5:20:68:11:be:6d:06:38:5c:d6:39:7f:fe:56:f8:
e4:21:62:86:6d:0c:b0:2f:b8:34:98:b5:da:97:84:
8c:ca:67:1a:3a:00:cc:e8:8a:cd:95:93:7f:3c:a5:
5a:b0:3d:2a:b8:81:26:55:0e:87:72:5d:23:bb:78:
c0:cb:d1:97:ad:15:16:a9:c4:58:cf:1b:49:19:74:
63:23:db:6a:6d:68:c9:27:60:24:a2:fa:26:44:02:
d4:c0:d5:d2:aa:01:65:db:ef:fb:20:1d:e1:bf:2b:
b4:29:25:b3:e0:d3:f9:8d:f3:3a:60:92:28:c6:3d:
89:f3:91:30:b8:9f:ab:9b:8c:75:85:8a:7d:72:03:
6d:3e:c0:12:57:cb:23:6c:5b:d1:64:9d:5e:7b:24:
9b:e8:94:b3:25:21:a0:b0:89:fd:ad:be:b9:81:42:
72:a9:4a:6e:ea:f8:1b:b9:cc:6c:00:60:af:79:ec:
03:ea:4b:07:96:55:f7:1d:69:59:22:2f:b3:0e:4e:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:7B:61:F2:08:4B:F2:66:BF:2A:E3:6F:F3:A6:60:17:3A:6D:DB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVd7YfIIS_Jmvyrjb_OmYBc6bds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.23.255
89.106.25.0-89.106.26.255
94.229.212.0/24
94.229.222.0/24
103.47.59.0/24
194.36.33.0-194.36.34.255
Signature Algorithm: sha256WithRSAEncryption
0c:f3:fa:95:c5:ed:c7:30:f3:0e:d5:32:86:79:96:b7:53:d2:
1a:2e:7e:23:ce:5c:b6:2a:c1:1c:6a:ba:fb:48:75:d6:04:05:
ca:db:da:3e:ba:d4:b7:54:9b:ec:40:30:51:36:09:4b:61:1f:
0c:08:fd:c2:40:8f:e6:42:b5:72:4f:7f:c8:7b:ca:f3:2f:53:
f5:7d:63:f7:da:f4:d2:01:6e:70:10:23:a9:6b:32:08:b8:f7:
74:e0:09:c7:9d:f4:96:2f:88:b8:66:03:4b:f5:f6:ba:b2:fa:
40:ad:2b:91:2d:19:fe:dc:f9:97:b0:02:44:d2:fd:3d:a6:4b:
d2:5c:37:aa:09:10:79:44:b1:bb:23:6e:4a:3e:d5:cb:10:ef:
a3:ad:fc:e0:d6:7c:23:c0:b5:09:dd:e3:38:9a:26:a0:1f:ff:
2a:4f:19:db:1e:34:ef:0a:4b:0b:d4:01:b4:e8:64:f6:2b:77:
48:fd:30:cb:27:1a:7a:56:f7:0d:bb:dd:59:a8:8d:23:24:d5:
0f:f9:b8:ef:9f:9a:bb:3e:f7:1b:bc:d5:b0:2a:b3:cd:d0:1b:
3a:3f:48:d8:17:a7:80:ff:43:c8:f3:b5:a9:a2:1a:67:bc:ed:
c3:a6:08:47:89:44:58:4e:f6:68:d2:6c:0c:5b:ca:e6:ba:63:
28:91:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:27 2025 by rpki-client